I. Responsible person, scope

The responsible party within the meaning of the relevant data protection regulations is Beyond Drinks GmbH (hereinafter referred to as the “provider”). Details of the address to which you can be served and the powers of representation can be found in the imprint.

The protection of personal data is our highest priority. We would therefore like to inform you here about which data we collect and when, and how we handle your personal data. This privacy policy describes the collection and use of personal data when you visit and use our website.www.laoridrinks.com (hereinafter: “Website”).

II. General information on data processing

1. Scope of processing of personal data

We generally only process our users' personal data to the extent that this is necessary to provide a functional website and to carry out the services we offer. Our users' personal data is generally only processed with the user's consent or on the basis of other legal provisions that permit data processing.

If we process your personal data based on your consent, you have the right to revoke your consent at any time without giving reasons with effect for the future.

We also process personal data for statistical and market analysis purposes. In doing so, statistics on the industry affiliation, location, and market area of ​​website visitors are compiled and evaluated in an anonymized form. You can find details on this in the relevant sections of this data protection declaration.

Additional data protection notices may apply to special services (e.g. sending newsletters). We will inform you about these at the beginning of the usage process of the respective service.

2. Data deletion and storage period

In principle and unless otherwise stated, your personal data will only be stored until the purpose for which it was collected and stored no longer applies. In accordance with your consent, data may also be stored for longer as long as you do not revoke your consent.

Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The processing or deletion of data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need to further store the data for the conclusion or fulfillment of a contract.

3. Use of data processors

In carrying out the services we offer, we use external service providers who, among other things, process your personal data exclusively on our behalf. This is the case, for example, with payment service providers, fulfillment and shipping service providers, newsletter shipping service providers, as well as CRM and hosting service providers. We have concluded agreements with all such processors - where legally required - on the processing of personal data on behalf of them in accordance with Art. 28 GDPR.

4. Transfer to third countries

Unless otherwise stated, all data processing takes place within the EU or EEA states.

Data processing operations carried out by third parties established outside the aforementioned geographical area may take place in part or in full in the countries of the respective establishment or in accordance with the respective data protection regulations.

Any transfer of personal data outside the EU or EEA will only take place on the basis of an adequacy decision by the European Commission or in accordance with standard contractual clauses of the European Commission. A list of the current adequacy decisions is available on the European Commission website.

Information about the EU-US Privacy Shield, and in particular information about the participation of a particular company, can be found on the website of the US Department of Commerce.

III. General use of data when providing the website and creating log files

When you visit our website, we automatically save usage-related data about the usage process. This includes in particular the IP address, the URLs visited, the length of stay, the operating system and browser used and the amount of data transferred.

We collect this data to ensure that our website is available to you. In addition, it is used to anonymously analyze, store and evaluate user behavior and to continuously improve and develop the service. Further details on the systems used can be found in the sections on cookies and social media below.

We only store your IP address in the log files for a limited period of time if this is necessary for security purposes.

Our legitimate interest lies in the aforementioned purposes, which justifies data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.

IV. Data processing for orders and when creating a user account

a. Placing an order

You can place an order as a guest on our website. In this case, we collect the following personal data during the ordering process: first name, last name, email address, delivery address, billing address (if different), payment details. You can provide us with further information voluntarily.

This information is essential in order to carry out the purchase contract concluded with you and the associated communication with you. If you do not provide us with this data, we will unfortunately not be able to enter into a contract with you.

Payment data is not collected and stored by us, but directly by the payment service provider you have chosen to process the payment. We only receive information from the payment service provider about whether the payment was successful.

The basis for processing is Art. 6 Para. 1 Letter b) GDPR.

b. Credit check

In order to offer you Klarna’s payment options, we will transmit personal data, such as contact details and order details, to Klarna. This enables Klarna to assess whether you can use the payment options offered by Klarna and to adapt the payment options to your needs. General information about Klarna can be found here Your personal data will be processed by Klarna in accordance with the applicable data protection regulations and as stated in Klarna's privacy policy treated.

c.creating a user account

On our website you have the option of creating a user account to place orders faster and easier and to save information about past orders. When you register an account we collect the following data: first name, last name, email address and password. We need this data to ensure that the user account functions as intended and can only be assigned to you. The collection and processing of personal data in this context is justified by the user agreement that we conclude with you. If you do not provide us with this data, we unfortunately cannot set up a customer account for you.

The basis for processing is Art. 6 Para. 1 Letter b) GDPR.

V. Data transmission when using the rating function

Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after an order has been placed.

This serves to safeguard our legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, which prevail within the framework of a balancing of interests. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is made available as part of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found in our privacy policy .

When you call up the Trustbadge, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data is saved in a security database for the analysis of security irregularities. The log files are automatically deleted no later than 90 days after they are created.

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. The contractual agreement between you and Trusted Shops applies. Personal data is automatically collected from the order data for this purpose. Whether you as a buyer are already registered to use a product is automatically checked using a neutral parameter, the email address hashed using a cryptographic one-way function. Before transmission, the email address is converted into this hash value, which Trusted Shops cannot decrypt. After checking for a match, the parameter is automatically deleted.

This is necessary to fulfill our and Trusted Shops' overriding legitimate interests in providing buyer protection linked to the specific order and transactional evaluation services in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Further details, including on objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.

The basis for processing is Art. 6 Para. 1 Letter f) GDPR.

VI.Data transmission when using the contact form

If you write to us via the contact form on our website, we receive the personal data that you provide to us voluntarily, i.e. name, email address, content of the message. We use this data exclusively to respond to your contact. It is not processed further. If you do not provide this data, we unfortunately cannot process your request.

The basis for processing is Art. 6 (1) lit. b) GDPR.

VII. Google Maps

We use Google Maps on our website to visually display geographical information. Google Maps is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de [http://www.google.de This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offer and easy accessibility of our locations in accordance with Art. 6 Paragraph 1 Clause 1 Letter f) of GDPR.

When using Google Maps, Google transmits or processes data about the use of the maps functions by website visitors, which may include in particular the IP address and location data. We have no influence on this data processing. As far as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be found here [https://www.privacyshield.gov/list ] can be viewed.

To deactivate the Google Maps service and thus prevent data transmission to Google, you must deactivate the Java Script function in your browser. In this case, Google Maps cannot be used or can only be used to a limited extent.

Further information about data processing by Google can be found in Google’s privacy policy [https://www.google.com/privacypolicy.html ]. The terms of use for Google Maps [https://www.google.com/intl/de_de/help/terms_maps.html ] contain detailed information about the map service.

The data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can find here [https://privacy.google.com/intl/de/businesses/mapscontrollerterms/ ] can be viewed.

VIII. Use of cookies and other trackers

a) Description and scope of data processing

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser the next time you visit (persistent cookies).

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. You can also delete cookies manually from your device at any time.

If you do not accept cookies, the functionality of our website may be limited.

We use cookies in accordance with Art. 6 (1) (c) GDPR to the extent that this is necessary to fulfil a legal obligation to which we are subject, and in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offer.

We only use additional cookies that allow us to observe and evaluate user behavior for market analysis purposes if you have given us your consent in accordance with Art. 6 Paragraph 1 Letter a) of the GDPR. These are third-party cookies that are used when you use our services. Please see the following sections for details.

GOOGLE ANALYTICS

We work with “Google Analytics”. This is a web analysis service provided by Google Inc. The information on your use of our website generated through the Google Analytics cookie is usually transferred to a Google server in the USA and saved there. IP anonymization has been activated on our websites, so that the IP address of Google users within member states of the European Union or in other contracting states to the Agreement on the European Economic Area is shortened beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all of the functions of this website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by installing the browser plug-in available under the following link:http://tools.google.com/dlpage/gaoptout?hl=de Alternatively, you can click on the following link: Deactivate Google Analytics. An opt-out cookie will then be set that prevents the future collection of your data when you visit this website.

For more information about how Google handles personal data, please refer to Google’s privacy policy:https://policies.google.com/privacy?hl=de .

GOOGLE ADWORDS CONVERSION

We use Google AdWords to draw attention to our attractive offers on external websites. We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

These advertisements are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will save a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are usually saved as analysis values ​​for this cookie.

These cookies enable Google to recognize your Internet browser.If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be tracked across Adwords customers' websites. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising material, and in particular we cannot identify users based on this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our current level of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, suppressing third-party cookies will prevent you from receiving advertisements from third parties; b) by deactivating cookies for conversion tracking by setting your browser so that cookies from the domain "www.googleadservices.com “ are blocked,https://www.google.de/settings/ads , whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers who are part of the self-regulation campaign “About Ads” via the linkhttp://www.aboutads.info/choices , whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating it in your browsers Firefox, Internet Explorer or Google Chrome under the linkhttp://www.google.com/settings/ads/ plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

Further information on data protection at Google can be found here:http://www.google.com/intl/de/policies/privacy andhttps://services.google.com/sitestats/de.html .

GOOGLE REMARKETING

Google Ads is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de [http://www.google.de ]).

As described above, we use Google Ads to advertise our offer in Google search results and on third-party websites. If you have given us your consent to do so in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR, Google will set the so-called remarketing cookie when you visit our website, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Once the purpose no longer applies and we no longer use Google Ads Remarketing, the data collected in this context will be deleted.

Any further data processing will only take place if you have given Google your consent to link your web and app browsing history to your Google account and to use information from your Google account to personalize ads that you see on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data to create target groups.

As far as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be found here [https://www.privacyshield.gov/list ] You can revoke your consent at any time with effect for the future by deleting the remarketing cookie via this link [https://adssettings.google.com/authenticated?hl=nl ] You can also register with the Digital Advertising Alliance [https://www.aboutads.info/ ] about the setting of cookies and make settings accordingly.

FACEBOOK CUSTOM AUDIENCES RETARGETING

We also use the remarketing function “Custom Audiences” from Facebook Inc. (“Facebook”) on our website. This enables website users to be shown interest-based advertisements (“Facebook Ads”) when they visit the social network Facebook or other websites that also use the process. Our aim is to show you advertising that is of interest to you in order to make our website more interesting for you.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data collected through the use of this tool by Facebook and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding web page on our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and save your IP address and other identification features.

The “Facebook Custom Audiences” function can be deactivated via this link and for logged-in users athttps://www.facebook.com/settings/?tab=ads#_m possible.

The legal basis for the processing of your data is Art. 6 Paragraph 1 Letter f) GDPR. Further information on data processing by Facebook can be found athttps://www.facebook.com/about/privacy .

HOTJAR

Hotjar is an offering from Hotjar ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. We use this service to better understand the needs of our users and to optimize the offering on this website. With the help of this technology, we get a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click, what they like and what they don't like, etc.) and this helps us to tailor our offering to the feedback of our users.This service uses cookies and other technologies to collect information about the behavior of our users and their devices (in particular the IP address of the device (only recorded and stored in an anonymized form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website). This information is stored in a pseudonymized user profile. The information is not used by the service itself or by us to identify individual users or to combine it with other data about individual users. For more information, see Hotjar's privacy policy:https://www.hotjar.com/legal/policies/privacy

You can object to the storage of a user profile and information about your visit to our website by these services, as well as the setting of tracking cookies on other websites via these links:

https://www.hotjar.com/legal/compliance/opt-out

INTERCOM

Intercom is a service provided by R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin (Ireland). Through the Intercom service, we offer users on our website the opportunity to communicate directly with us via a chat function. If you use the chat function, Intercom collects data from you on our behalf (in particular IP address) in order to recognize you as an individual user on our website. Cross-website tracking does not take place. Neither we nor Intercom can easily determine your identity based on the IP address or the unique identifier provided by Intercom.

For further information on how Intercom handles personal data, please refer to the relevant privacy policy:https://www.intercom.com/legal/privacy#personal-data-collected-by-intercom

The basis for processing is Art. 6 (1) (b) GDPR if the processing of personal data via Intercom takes place in the context of contract performance.

The basis for processing, however, is Art. 6 (1) (f) GDPR if the processing of personal data via Intercom does not serve to fulfill the contract, but to pursue our legitimate interests in offering you a functional and attractive website and providing you with a simple and direct way to contact us.

TALKABLE

Talkable is a service provided by Curebit Inc., 2370 Market St, Suite 103 San Francisco, CA 94114, USA. We offer you the opportunity to receive benefits and discounts in return for your recommendation. For this purpose, we collect your name and email address via Talkable. If you log in using your existing Facebook or Google account, we pull this data from the corresponding accounts. Talkable processes this data on our behalf to ensure the implementation of the recommendation campaigns and to provide us with information on their effect. For more information on how Talkable handles personal data, please see Curebit's privacy policy:https://www.talkable.com/privacy

b) Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted from there to our site. Therefore, you as a user have full control over the use of cookies.You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions.

IX. Newsletter

You can register to receive our newsletter by entering your email address in the form provided. You can also enter your first and last name, gender and place of residence on a voluntary basis. You will then receive an automatic confirmation email containing a link to the address you provided. The registration process is only completed when you click on this link.

By agreeing to receive our newsletter, we use your email address to send you advertising and offers relating to our own services and those of partner companies that may be of interest to you. In addition, we can track how often a particular newsletter message has been opened and the links contained therein have been clicked. To achieve this, we collect information on the time of retrieval, IP address, browser type and operating system. This enables us to better assess which of our products interest you most and to personalize and improve our offering accordingly. The data is not passed on to third parties.

You can withdraw your consent to receive newsletters at any time without giving reasons by sending us a corresponding message to the contact details mentioned under “Contact” or “Imprint” or by following the instructions for withdrawing your consent contained in each newsletter.

We will inform you about your right of objection when we collect your email address and in the respective newsletter.

X. Social Media Plugins

We use social media plugins from various providers on our website to improve our offering and make it more attractive for you. The basis for the associated processing of personal data is therefore Art. 6 Para. 1 lit. f GDPR.

We currently use the following social media plug-ins:

Facebook, LinkedIn, Instagram

We use the so-called Shariff solution. This means that when you visit our site, no personal data is initially passed on to the plug-in providers. You can recognize the plug-in provider by the marking on the box above its initial letter or logo. We give you the opportunity to communicate directly with the plug-in provider using the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offering. In addition, the data mentioned under III. of this declaration is transmitted. In the case of Facebook, according to the respective provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data about you is transmitted to the respective plug-in provider and stored there (in the USA for US providers). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the grayed-out box.

We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods.We also have no information about the deletion of the data collected by the plug-in provider.

The plug-in provider saves the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact the respective plug-in provider to exercise this right. We use the plug-ins to offer you the opportunity to interact with social networks and other users so that we can improve our offering and make it more interesting for you as a user.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will prevent your data from being assigned to your profile with the plug-in provider.

The purpose and scope of data collection and the further processing and use of the data by the providers on their websites as well as a contact option and your related rights and setting options to protect your privacy can be found in the data protection information of the providers.

https://www.facebook.com/policy.php

https://help.instagram.com/155833707900388

http://www.linkedin.com/legal/privacy-policy

XI. Your Rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

right to information - You have the right to request information about the personal data we process or store.

right to rectification - You have the right to request that we correct or complete any incorrect or incomplete data concerning you.

right to erasure - Under certain circumstances, you have the right to request that we delete your data.

right to restriction of processing - You have the right to ask us to restrict the processing of your data in certain circumstances.

right of objection - You have the right to object to the processing of your personal data under certain circumstances.

right to data portability - You have the right to request that we transfer or disclose your personal data to another controller or to you under certain circumstances.

Your right to complain - You can also lodge a complaint with a data protection authority.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time without giving reasons to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

XII. Changes to this Privacy Policy

Due to the dynamic development of the Internet, new technologies and possibilities are constantly being developed. So that we can also allow you to benefit from these possibilities and technologies, we reserve the right to change this data protection declaration in the future when introducing new, additional or changing or expanding existing services or service elements.

To the extent that the change to the privacy policy only affects the use of data in general terms and/or the use of data for orders and not the use of data within the framework of a user account, the new privacy policy applies from the date of its update on the website.

A change to the privacy policy that relates to the use of data already collected and stored for sending newsletters will only be made if this is reasonable for you. If and to the extent that changes to the privacy policy relate to the use of data already collected and used for sending newsletters, we will notify you in good time by email, on our website or in another form. If no objection is made within the specified period, the amended privacy policy is deemed to have been accepted by you. In the notification, we will inform you of your right of objection and the importance of the objection period.